Inherited permissions don't always work (permissions may be too restrictive)
Overview
Group count zero in tab; no groups listed.
Reproduction steps
On a demo site, e.g.
civibuild create so3 --type standalone-dev --civi-ver master
observable at https://smaster.demo.civicrm.org/civicrm
Go to Contacts » Manage Groups. Click Contacts for the Advisory Board. Click to view a contact, e.g. Rosario. Their contact summary screen shows Groups (0) in the tab, and no groups are listed.
Expected behaviour
Group count and group list should be correct.
Comments
Not sure when this stopped working. Seems to be CRM_Core_Permission::getPermissionedStaticGroupClause
returning (0)
for its where clause.
This worked in 5.67 standalone, but not 5.68 so is probably to do with recent permissions work.
Edit
This is not standalone specific. It exhibited in standalone because we changed the admin role to just have "administer all CiviCRM ACLS and permissions" - but this does not correctly bestow permissions as it suggests.
https://chat.civicrm.org/civicrm/pl/r8qgwtzw9bbwbgbxgjprtpm69o